Privacy

The short version

This site does not use advertising or analytics scripts, and it does not follow you across other websites. We do not sell information. What we keep is what you choose to send, plus the technical records a web server needs in order to run and to stay secure.

Contact form

If you send a note, we store:

• your name
• your email address
• a phone number, if you give one
• a company name, if you give one
• the service you asked us to look at first, if you choose one
• the message

We use that information to read the note, reply, and keep a record of the conversation. Writing to us does not add you to a mailing list. We do not use the message to advertise to you, and we do not use it to train a public model.

The legal basis is Article 6 (1) (b) of the GDPR, because the note is a step toward a possible project, and Article 6 (1) (f), because we have a legitimate interest in answering and in keeping a short record when a project does not go ahead. You can object to that record. The way to do it is below.

The form has a hidden field meant to catch automated spam. If that field is filled in, we discard the submission and do not store it.

Booked meetings

If you hold a time on the booking page, we store your name, email address, phone number if you give one, company if you give one, the subject you chose, the note, and the time. We use that to keep the slot and to prepare for the conversation. The same legal basis applies as for a contact note: a step toward a possible project, and a short record if it does not go ahead.

The confirmation page gives you a private link to move the time or release it. Releasing a time puts it back on the calendar. The link is the way we know the request is yours, so do not forward it. Write to info@mitcoral.com if you want the record deleted as well. We do not send the booking to an advertising or mailing service. A calendar file or a Google Calendar link is created only when you choose it, and opening the Google link leaves this site.

Cookies and this browser

A first-party session cookie is set so the contact form can reject a forged submission, and so the private admin area can stay signed in. It is limited to this site, it is sent over HTTPS, and it expires after two hours of inactivity. It is not used to recognise you on other websites. The public pages do not set an analytics cookie and do not ask you to accept a tracking banner, because there is nothing to opt into.

If you choose a light or dark theme, that choice is stored in this browser under the name mitcoral-theme. It stays on your device. It is not sent to us with the page request, and clearing the site’s data in the browser removes it.

Server logs

The server may record the usual technical data for a request: IP address, date and time, the page requested, the response status, and the browser string. We use those records to keep the site available and to look into abuse. We do not use them to build a profile of visitors, and we do not combine them with a contact note unless we have to investigate a specific incident.

The legal basis is Article 6 (1) (f) of the GDPR, our legitimate interest in operating and securing the site.

Hosting and other services

The site is served over HTTPS from the studio’s own server. Contact messages are stored in the studio’s database on that server. We do not pass them to an advertising network, an analytics service, or a mailing platform.

Fonts on the public site are files we serve ourselves, or fonts already on your device. The public pages do not load analytics scripts or advertising pixels.

If you choose a language other than English, the same page is shown through Google Translate, without Google’s navigation bar. Google receives the page address and translates the words under its own privacy policy. Choosing English brings you back to this site.

Share links on a note, such as email or a social network, leave this site only when you choose to open them. Opening one is a visit to that other service, under its own terms.

How long we keep it

A message stays until the conversation is finished and we no longer need the record, or until you ask us to delete it. If a project goes ahead, we keep what the agreement and the law require for that work, and no more of the original note than that requires. Server logs are kept only while they are useful for security and operations, then removed or overwritten. The session cookie ends when it expires or when you sign out of the admin area.

Who can see a message

The people at the studio who reply. We do not sell, rent, or trade contact details. If the law requires a disclosure to a public authority, we make it only to the extent the law requires.

Your rights

You can write to info@mitcoral.com and ask for:

• a copy of the personal information we hold about you
• a correction, if something is wrong
• deletion, when we are no longer allowed to keep it
• a limit on how we use it while a question is open
• a portable copy, where that right applies
• an objection to processing that rests on legitimate interest, including the short record of a note that did not become a project

We may need to confirm that the request comes from you before we send or delete a record. We reply without a fee unless the request is manifestly unfounded or excessive.

You can also complain to a data protection supervisory authority. That can be the authority where you live, or the authority for the place where the studio is established. For an establishment in Frankfurt, that authority is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, datenschutz.hessen.de.

Children

This site is written for companies. We do not knowingly collect information from children. If you believe a child has sent us a note, write to us and we will delete it.

Changes to this notice

If this notice changes, the new text replaces this one on this page. The date under the heading is the date of the version you are reading. Continuing to use the site after a change means you are reading the notice that is published here, not an older copy.